810-110 AITECH — Cisco AI Technical Practitioner Cheat Sheet

Compact Cisco 810-110 AITECH Cheat sheet covering AI/ML concepts, generative AI, data, infrastructure, security, and operations decisions.

Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions.

Scope and study context

For Cisco-style AI scenarios, do not stop at “which model is best.” Also identify:

  1. Business outcome and risk tolerance.
  2. Data type, quality, sensitivity, and ownership.
  3. AI approach: rules, ML, deep learning, generative AI, RAG, or agentic workflow.
  4. Placement: edge, campus, branch, data center, cloud, or hybrid.
  5. Network, security, observability, and operations impact.
  6. Governance, monitoring, rollback, and continuous improvement needs.

Use this independent Cheat Sheet to prepare for the Cisco AI Technical Practitioner (810-110 AITECH) exam from Cisco, official exam code 810-110 AITECH. It is designed for the final review stage: confirming the concepts, decision rules, and common traps you should understand before moving into topic drills, mock exams, and detailed explanations.

This page is not affiliated with Cisco and does not replace Cisco’s official exam information. It focuses on practical exam-prep review: AI fundamentals, data handling, model behavior, generative AI, AI infrastructure, networking considerations, security, governance, and operations.

Use this Cheat Sheet first, then move into IT Mastery practice:

  1. Start with topic drills for AI fundamentals, data, model evaluation, GenAI, infrastructure, security, and operations.
  2. For every missed item, classify the miss:
    • Concept gap.
    • Metric or terminology confusion.
    • Scenario decision error.
    • Security/governance oversight.
    • Misread wording.
  3. Read the detailed explanations, not just the correct option.
  4. Rework missed questions after a delay.
  5. Finish with mixed mock exams to practice switching topics under time pressure.

A strong next step is to choose your weakest area from the checklist above and complete a focused set of original practice questions before attempting a full-length mixed review.

AI, ML, and Generative AI Terms

TermExam-ready meaningCommon trap
Artificial intelligenceSystems that perform tasks associated with human intelligence, such as perception, reasoning, prediction, or generationAI is broader than machine learning
Machine learningAI technique where models learn patterns from dataML is not always generative
Deep learningML using multi-layer neural networksRequires more data/compute than many classical models
Generative AIAI that creates text, code, images, audio, or other outputsOutput may be plausible but false
Foundation modelLarge model trained on broad data and adaptable to many tasksNot automatically safe, private, or accurate
Large language modelFoundation model optimized for language tasksDoes not “know” truth; predicts likely tokens
TokenUnit of text processed by a modelToken count affects context, latency, and cost
Context windowMaximum input/output tokens the model can consider in one interactionLarger context does not guarantee better reasoning
EmbeddingNumeric vector representing semantic meaningEmbeddings support similarity search, not exact truth
Vector database/indexStores and searches embeddings by similarityRetrieval quality depends on chunks, embeddings, metadata, and ranking
InferenceUsing a trained model to produce predictions or outputsDifferent from training or fine-tuning
TrainingLearning model parameters from dataUsually more expensive and data-intensive than inference
Fine-tuningAdditional training on task/domain examplesNot the default fix for missing facts
Prompt engineeringDesigning instructions and context for model outputPrompting cannot fully replace controls and evaluation
RAGRetrieval-augmented generation; retrieves external content and injects it into prompt contextRAG can still hallucinate if retrieval or grounding is poor
Agentic AIAI system that plans steps and uses tools/APIs to complete tasksTool authorization and auditability are critical
HallucinationConfident but incorrect or unsupported outputReduced by grounding, evaluation, and guardrails; not eliminated
Model driftDegradation as real-world data changesRequires monitoring and retraining/update strategy
BiasSystematic unfairness or skew in data/model outputsCan exist even with high overall accuracy
ExplainabilityAbility to understand why a model made a decisionMore important in regulated, high-risk, or user-impacting decisions

AI Workload Lifecycle

    flowchart LR
	    A[Define business problem] --> B[Identify data sources]
	    B --> C[Prepare and label data]
	    C --> D[Choose AI approach]
	    D --> E[Train, configure, or prompt]
	    E --> F[Evaluate]
	    F --> G[Deploy]
	    G --> H[Monitor]
	    H --> I[Improve or retire]
	    I --> B
Notes and examples
PhaseKey questionsExam focus
Problem framingIs the goal prediction, classification, generation, search, summarization, automation, or anomaly detection?Match AI method to outcome
Data sourcingWhat data is available, trusted, labeled, current, and permitted for use?Data quality and governance
PreparationClean, normalize, transform, label, split, deduplicate, and protect dataAvoid leakage and bias
Model or approach selectionRules, classical ML, deep learning, LLM, RAG, fine-tuning, or agent?Choose the simplest approach that meets requirements
EvaluationWhat metric reflects the business risk?Accuracy is not always enough
DeploymentWhere should inference run? What latency, cost, privacy, and connectivity constraints exist?Edge/data center/cloud tradeoffs
OperationsHow will drift, failure, abuse, and infrastructure issues be detected?MLOps/LLMOps and observability

Choosing the Right AI Approach

ScenarioPreferWhyWatch for
Known rules, stable logic, low ambiguityRules or automationDeterministic, auditable, simplerDo not add ML where rules are enough
Predict a numeric valueSupervised regressionLearns relationship between features and continuous targetOutliers and changing data distributions
Assign item to known categorySupervised classificationLearns from labeled examplesClass imbalance and false positive/negative cost
Discover groups without labelsClusteringFinds natural groupingsClusters may not map to business categories
Detect unusual behaviorAnomaly detectionUseful for operations, security, fraud, performanceNeeds baseline and tuning
Optimize actions through feedbackReinforcement learningLearns policies from rewardsCan be complex and risky in production
Understand images/videoComputer vision / CNNs / vision transformersExtracts visual patternsData labeling and edge compute requirements
Summarize or generate textLLM / generative AIProduces natural-language outputHallucination, privacy, prompt injection
Answer using enterprise documentsRAGGrounds answers in retrieved contentPoor chunking/retrieval causes wrong answers
Adapt tone, format, or domain behaviorPrompting or fine-tuningPrompt first; fine-tune when examples are neededFine-tuning does not reliably add fresh knowledge
Execute multi-step tasks with toolsAgentic workflowPlans, calls APIs, and uses memory/toolsTool permissions, audit logs, and guardrails

Model and Algorithm Selection

Model/techniqueBest fitStrengthsLimitations/traps
Linear regressionNumeric prediction with linear relationshipsSimple, explainable, fastPoor for complex nonlinear patterns
Logistic regressionBinary or multiclass classificationInterpretable baselineName says regression but used for classification
Decision treeClassification/regression with explainabilityEasy to visualizeCan overfit
Random forestGeneral tabular predictionReduces overfitting vs single treeLess interpretable
Gradient boostingHigh-performing tabular predictionStrong accuracy on structured dataTuning and overfitting risk
k-nearest neighborsSimilarity-based classification/regressionSimple conceptSlow at scale; sensitive to feature scaling
Support vector machineClassification with clear marginsEffective in some high-dimensional spacesLess transparent; scaling concerns
k-meansClustering into predefined number of groupsFast and commonMust choose k; assumes roughly spherical clusters
DBSCANDensity-based clusteringFinds irregular clusters and noiseSensitive to parameters and density variation
Isolation forestAnomaly detectionGood for outlier discoveryNeeds tuning and validation
Neural networkComplex nonlinear patternsFlexibleRequires more data, compute, and monitoring
CNNImages/spatial dataStrong visual feature extractionTraining data and compute intensive
RNN/LSTMSequential/time-series dataCaptures sequence patternsOften replaced by transformer approaches for many language tasks
TransformerLanguage, multimodal, sequence tasksParallelizable, strong context modelingCompute, latency, and governance concerns
LLMText generation, summarization, reasoning assistanceFlexible natural-language interfaceProbabilistic and may hallucinate
Notes and examples

Model selection quick rules

If the problem asks for…Likely approachNotes
Yes/no or category predictionSupervised classificationEvaluate with precision, recall, F1, ROC-AUC, or PR-AUC.
Numeric predictionSupervised regressionEvaluate with MAE, RMSE, R-squared, business error tolerance.
Group similar itemsClusteringNo labels required; evaluation can be harder.
Find unusual behaviorAnomaly detectionUseful for fraud, security, sensor faults, network anomalies.
Recommend itemsRecommendation/rankingConsider user behavior, feedback loops, fairness, cold start.
Image recognitionComputer vision / CNNs / vision transformersData quality and labeling are critical.
Natural language understandingNLP models or LLMsConsider embeddings, context, latency, and hallucination risk.
Generate text or codeLLM / GenAIUse prompts, RAG, guardrails, and evaluation.
Make sequential decisions with rewardsReinforcement learningMore complex; environment and reward design matter.

Classical ML vs deep learning vs LLMs

ChoiceStrengthsLimitationsBest fit
Classical MLOften explainable, efficient, strong on tabular data.May need feature engineering; limited for unstructured language/image tasks.Structured business data, smaller datasets, low-latency needs.
Deep learningStrong for images, speech, text, complex patterns.Data-hungry, compute-intensive, harder to explain.Unstructured data and large-scale pattern recognition.
Pre-trained foundation modelFast adaptation, broad capabilities.Cost, latency, privacy, hallucination, governance concerns.Summarization, Q&A, content generation, semantic search.
Custom model from scratchMaximum control.Expensive, data-intensive, operationally complex.Specialized needs with sufficient data, budget, and expertise.

Data Reference

Data Types

Data typeExamplesAI handling notes
StructuredTables, logs with fields, CRM records, metricsCommon for classical ML and analytics
Semi-structuredJSON, XML, event records, emails with metadataRequires parsing and schema management
UnstructuredText, images, audio, video, PDFsOften needs embeddings, OCR, NLP, CV, or multimodal models
Time-seriesTelemetry, sensor data, network metricsPreserve time order; avoid random leakage
Graph dataNetwork topology, identity relationships, dependenciesUseful for relationship and path analysis
Streaming dataLive telemetry, alerts, eventsRequires low-latency processing and monitoring
Notes and examples

Data Preparation Decisions

TaskPurposeExam trap
CleaningRemove errors, duplicates, invalid valuesDo not silently remove meaningful outliers
Normalization/scalingPut numeric features on comparable scalesEspecially important for distance-based methods
EncodingConvert categories to numeric representationOrdinal vs one-hot encoding matters
TokenizationBreak text into model-processable unitsToken limits affect prompt design
ChunkingSplit documents for retrievalChunks too small lose context; too large reduce precision
LabelingAdd target values/classesLabel quality often limits model quality
Train/validation/test splitSeparate training, tuning, and final evaluationNever tune on the test set
Cross-validationRepeated train/validate cyclesUseful with limited data
Feature engineeringCreate useful inputs from raw dataCan introduce data leakage
DeduplicationRemove repeated recordsDuplicates across train/test inflate scores
Class balancingAddress rare classesAccuracy can hide poor minority-class performance
Data maskingProtect sensitive dataMask before using data in prompts or training when required

Data lifecycle review

AI projects usually fail from poor data, weak evaluation, or operational mismatch before they fail from lack of model sophistication.

    flowchart LR
	    A[Define use case] --> B[Collect and govern data]
	    B --> C[Clean, label, and validate]
	    C --> D[Split data]
	    D --> E[Train or select model]
	    E --> F[Evaluate]
	    F --> G[Deploy]
	    G --> H[Monitor]
	    H --> I[Retrain or adjust]
	    I --> C
	    B --> J[Security, privacy, lineage]
	    F --> J
	    G --> J
	    H --> J

Data concepts to review

ConceptWhy it mattersCandidate mistake
Training dataUsed to fit the model.Letting test data influence training decisions.
Validation dataUsed for model selection and tuning.Treating validation results as final unbiased performance.
Test dataHeld out for final evaluation.Reusing the test set repeatedly until it becomes part of tuning.
LabelsKnown answers for supervised learning.Assuming labels exist or are reliable.
FeaturesInput variables used by the model.Including leakage features that reveal the target indirectly.
Data leakageInformation from the future or target slips into training.Getting unrealistically high test scores that fail in production.
Imbalanced dataOne class is much more common than another.Using accuracy when precision/recall is more relevant.
Data driftInput data distribution changes over time.Assuming a model remains valid forever.
Concept driftRelationship between inputs and target changes.Monitoring only data shape, not outcome quality.
LineageTraceability of where data came from and how it changed.Being unable to explain, audit, or reproduce a model result.

Data splitting trap

A random split is not always appropriate.

ScenarioBetter split approach
Time-series forecastingTrain on earlier time periods, validate/test on later periods.
User-level behaviorSplit by user/account/entity to avoid leakage.
Medical, finance, or regulated dataPreserve privacy, auditability, and representative sampling.
Rare eventsUse stratified splitting where appropriate.
Duplicated or near-duplicated recordsDeduplicate or group before splitting.

Evaluation Metrics

Use caseMetricMeaningWhen to prefer
Balanced classificationAccuracy = correct / totalOverall correctnessClasses are balanced and errors have similar cost
Imbalanced classificationPrecision = TP / (TP + FP)How many predicted positives are correctFalse positives are costly
Imbalanced classificationRecall = TP / (TP + FN)How many actual positives are foundFalse negatives are costly
Classification tradeoffF1 = 2 × precision × recall / (precision + recall)Balances precision and recallNeed one score for imbalanced classification
Threshold evaluationROC-AUCSeparability across thresholdsCompare classifiers independent of one threshold
RegressionMAEAverage absolute errorEasy to interpret
RegressionMSE/RMSEPenalizes larger errorsLarge mistakes are especially costly
RegressionR-squaredVariance explainedNot enough alone for operational fit
ClusteringSilhouette scoreCluster separation/cohesionInternal clustering assessment
Ranking/retrievalTop-k accuracy, MRR, NDCGQuality of ranked resultsSearch, recommendation, RAG retrieval
Generative AIFaithfulness/groundednessOutput supported by provided sourceRAG and enterprise Q&A
Generative AIToxicity/safety scoreHarmful or unsafe content riskPublic-facing or user-impacting systems
OperationsLatency, throughput, error rateRuntime performanceProduction readiness
BusinessCost per task, containment rate, analyst time savedOutcome valueExecutive and operational alignment
Notes and examples

Confusion Matrix Terms

TermMeaningExample
True positivePredicted positive and actually positiveCorrectly flagged threat
False positivePredicted positive but actually negativeBenign activity flagged as threat
True negativePredicted negative and actually negativeCorrectly ignored benign activity
False negativePredicted negative but actually positiveMissed actual threat

High-yield trap: A model can have high accuracy but poor recall if the positive class is rare.

Generative AI and RAG

RAG Pipeline

    flowchart LR
	    A[Source documents] --> B[Clean and split into chunks]
	    B --> C[Create embeddings]
	    C --> D[Store in vector index]
	    E[User question] --> F[Embed question]
	    F --> G[Retrieve relevant chunks]
	    G --> H[Optional rerank/filter]
	    H --> I[Prompt with context]
	    I --> J[Generate answer]
	    J --> K[Evaluate, cite, log]
Notes and examples
RAG componentPurposeFailure mode
Source selectionChoose trusted knowledgeInaccurate or outdated sources cause bad answers
ChunkingCreate retrievable unitsBad chunk size loses context or lowers precision
Embedding modelConvert text to vectorsPoor semantic match reduces retrieval quality
Vector indexStore and search embeddingsMissing metadata/filtering returns irrelevant content
RetrieverFinds candidate chunksLow recall misses needed facts
RerankerImproves ordering of resultsAdds latency
Prompt templateCombines task, rules, and retrieved contextWeak instructions allow unsupported answers
GeneratorProduces final responseMay hallucinate if context is weak
GuardrailsEnforce safety, format, and policyOverly broad guardrails block useful responses
Evaluation setTests answer qualityNo eval set means quality changes go unnoticed

Prompting, RAG, Fine-Tuning, or Training?

NeedBest first choiceWhy
Change response format or tonePrompt engineeringFastest and lowest complexity
Answer from current enterprise knowledgeRAGKeeps knowledge external and updateable
Reduce hallucination with citationsRAG plus grounding rulesModel can reference retrieved sources
Teach a model specialized style or repeated task patternFine-tuningLearns behavior from examples
Add private facts that change oftenRAG, not fine-tuningUpdating documents/index is easier than retraining
Build model for unique domain with large proprietary datasetTraining or deep fine-tuningOnly when simpler options cannot meet requirements
Enforce deterministic business logicTool/function call or rules engineLLM text generation is probabilistic
Execute workflow across systemsAgent with tools and guardrailsRequires permissions, logging, and human approval for risky actions

Prompt Engineering Patterns

PatternUseExample instruction
RoleSet context“Act as a network operations assistant.”
TaskSpecify required output“Summarize the incident in five bullets.”
ConstraintsLimit scope“Use only the provided context.”
FormatMake output parseable“Return JSON with fields: severity, cause, next_action.”
Few-shot examplesShow desired behaviorProvide examples of input and output
Chain-of-thought alternativeAsk for concise rationale or steps without exposing hidden reasoning“Provide a brief justification.”
GroundingTie answer to sources“Cite the source chunk ID for each claim.”
Refusal rulePrevent unsafe output“If context is insufficient, say you do not know.”

Key Generative AI Parameters

ParameterEffectExam note
TemperatureHigher values increase randomnessUse lower values for consistency
Top-pSamples from most probable token massAnother creativity/control setting
Max tokensCaps generated output lengthPrevents runaway responses but may truncate
System messageHigh-priority behavioral instructionUseful for policy and role constraints
Stop sequenceEnds generation at defined textHelpful for structured outputs
Context lengthAmount of input/output the model can processMore context can increase cost and latency

Agentic AI Reference

ComponentFunctionControl requirement
PlannerBreaks goal into stepsLimit scope and validate plans
Tools/functionsAPIs, databases, scripts, ticketing, network automationLeast privilege and allowlists
MemoryStores prior context or stateRetention and privacy controls
OrchestratorCoordinates model, tools, and stateLogging and error handling
Human-in-the-loopHuman approval for sensitive actionsRequired for high-impact changes
GuardrailsPolicy, safety, schema, and action constraintsTest with adversarial inputs
Audit trailRecords prompts, tool calls, outputs, and approvalsNeeded for troubleshooting and accountability

Exam trap: An agent that can call tools is not just a chatbot. It becomes an automation system and must be governed like one.

Cisco-Oriented Architecture Decision Points

In Cisco-focused scenarios, map AI requirements to network, security, observability, collaboration, and data center design. The exam may describe AI in a branch, campus, data center, cloud, security operations, contact center, or network operations context.

DomainAI use casesDesign prioritiesWatch for
Campus/branchLocal inference, smart cameras, user assistance, operational analyticsLatency, segmentation, device identity, bandwidth, physical constraintsDo not send sensitive data to cloud by default
Data centerModel hosting, inference clusters, training, vector databases, data pipelinesHigh-throughput fabric, east-west traffic, storage performance, telemetryAI traffic can be bursty and bandwidth-intensive
Cloud/hybridManaged AI services, burst compute, SaaS integrationsSecure connectivity, identity, data residency, cost visibilityCloud reduces operations burden but not governance responsibility
EdgeLow-latency decisions, disconnected operation, local privacySmall models, accelerators, lifecycle managementEdge devices may have limited compute and update windows
Security operationsAlert enrichment, anomaly detection, triage, summarizationExplainability, audit logs, false positive controlAI can assist analysts but should not blindly auto-remediate high-risk events
Network operationsAIOps, telemetry correlation, root-cause assistance, predictive maintenanceData quality, baselines, topology context, observabilityCorrelation is not causation
Collaboration/contact centerTranscription, summarization, virtual agents, sentiment, routingPII handling, user consent where applicable, quality monitoringGenerated summaries must be validated for accuracy
Application operationsCode assistance, log analysis, incident summariesSecure SDLC, secrets handling, prompt/data controlsDo not expose credentials or proprietary code without controls

Infrastructure for AI Workloads

ComponentTraining priorityInference priorityExam distinction
CPUData preprocessing, orchestration, lightweight modelsLow-volume or simple inferenceGeneral purpose but slower for many deep learning tasks
GPU/acceleratorParallel matrix operations, model trainingHigh-throughput inferenceCritical for deep learning performance
MemoryLarge batches, model parameters, feature setsModel size and context handlingMemory pressure causes failures or latency
StorageLarge datasets, checkpoints, artifactsModel files, embeddings, logsThroughput and data locality matter
NetworkDistributed training, data movement, storage accessAPI calls, service-to-service trafficAI clusters can generate heavy east-west traffic
ObservabilityJob metrics, utilization, failuresLatency, errors, quality, driftMonitor both infrastructure and model behavior
Notes and examples

Placement Decisions

RequirementPreferReason
Lowest latency near data sourceEdge/local inferenceReduces round-trip time
Sensitive data should remain localEdge or private data centerLimits data exposure
Large-scale model trainingData center or cloud with acceleratorsNeeds compute, storage, and high-speed networking
Variable demandCloud or elastic hybrid designScales with workload
Disconnected operationEdgeContinues without reliable WAN
Centralized governance and shared servicesData center or cloudEasier policy and lifecycle management
Cost-sensitive predictable workloadCompare on-premises/private vs cloudUtilization and operations model matter

Networking Considerations for AI

ConcernWhy it mattersDesign response
East-west trafficDistributed training and microservices exchange high volumes internallyUse high-throughput, low-latency fabric design
North-south trafficUsers, APIs, and cloud services access AI applicationsSecure ingress/egress and policy enforcement
LatencyAffects interactive inference and real-time automationPlace inference near users/data when needed
BandwidthLarge datasets, embeddings, and model artifacts are heavyPlan data movement and storage locality
Jitter/packet lossCan affect streaming analytics and interactive servicesUse QoS and resilient paths where appropriate
SegmentationAI systems may touch sensitive data and toolsIsolate workloads and enforce least privilege
TelemetryAI operations need logs, metrics, traces, and network contextCollect end-to-end visibility
API connectivityAgents and AI apps call tools/servicesSecure APIs with authentication, authorization, and rate controls

Security and Governance

AI Risk-to-Control Matrix

RiskDescriptionControls
Prompt injectionUser or document instructions manipulate model behaviorInput filtering, context isolation, tool allowlists, instruction hierarchy
Data leakageSensitive data appears in prompts, logs, outputs, or training dataData classification, masking, encryption, access control, retention limits
Model hallucinationUnsupported or false outputRAG, citations, refusal rules, evaluation, human review
Data poisoningTraining or retrieval data is maliciously alteredSource validation, integrity checks, approval workflows
Model theftUnauthorized access to model weights or endpointsStrong IAM, network segmentation, monitoring
Adversarial inputCrafted input causes incorrect outputRobust testing, anomaly detection, guardrails
Bias/fairness issueOutputs disadvantage groups or usersRepresentative data, bias testing, review process
Insecure tool useAgent calls risky APIs or changes systems incorrectlyLeast privilege, scoped tokens, human approval, audit logs
Over-permissioned service accountAI service has more access than neededRole-based access control and periodic review
Unlogged decisionsNo audit trail for AI-assisted actionsPrompt/output/tool-call logging with privacy controls
Shadow AIUnapproved tools used with enterprise dataPolicy, approved platforms, monitoring, user education
Notes and examples

Security Principles to Apply

PrincipleAI-specific application
Least privilegeModels, agents, vector stores, and pipelines get only required access
Zero TrustVerify users, devices, services, and context before access
Defense in depthCombine IAM, segmentation, encryption, logging, and guardrails
Secure by designBuild controls into the AI workflow, not after deployment
Human oversightRequire approval for high-impact, irreversible, or risky actions
Data minimizationUse only data required for the task
Separation of dutiesSeparate model development, approval, deployment, and monitoring roles
Continuous monitoringWatch quality, safety, security, and infrastructure signals

MLOps and LLMOps

PracticeML focusLLM/GenAI focus
VersioningData, features, code, model artifactsPrompts, model versions, retrieval corpora, vector indexes
RegistryApproved models and metadataApproved models, prompt templates, guardrails
CI/CDTest and deploy application/model pipelineTest prompts, eval sets, safety checks, integrations
MonitoringAccuracy, drift, latency, resource useGroundedness, hallucination rate, toxicity, retrieval quality, latency
RollbackRevert model/application versionRevert prompt, model, index, or guardrail version
Experiment trackingHyperparameters and metricsPrompts, model settings, retrieval parameters, eval results
Approval workflowPromote model to productionApprove model, data sources, tools, and policies
Incident responseModel failure or degraded qualityUnsafe output, data exposure, prompt injection, tool misuse
Notes and examples

Production Readiness Checklist

  • Defined business owner and technical owner.
  • Documented data sources, sensitivity, and allowed use.
  • Baseline model or non-AI alternative compared.
  • Evaluation metrics aligned to business risk.
  • Security controls for identity, network, data, and APIs.
  • Logging for prompts, responses, tool calls, and errors where appropriate.
  • Monitoring for latency, cost, quality, drift, and abuse.
  • Rollback plan for model, prompt, retrieval index, or application release.
  • Human review path for high-impact decisions.
  • User communication that AI output may need verification.

What must be versioned

ArtifactWhy version it
DatasetReproduce training and investigations.
LabelsTrack changes in ground truth.
Feature definitionsPrevent silent changes in model inputs.
CodeRebuild the pipeline.
Model artifactKnow exactly what is deployed.
HyperparametersReproduce training behavior.
Prompt templatesControl LLM behavior changes.
Retrieval indexTrace RAG answer sources.
Evaluation setCompare versions consistently.
ConfigurationReproduce deployment and runtime behavior.

Deployment patterns

PatternUse caseWatch for
Batch inferencePeriodic scoring, reports, offline recommendations.Freshness and scheduling.
Real-time inferenceUser-facing predictions or chat.Latency, availability, scaling.
Streaming inferenceContinuous data such as telemetry or sensors.Throughput, ordering, backpressure.
Canary deploymentRelease to small percentage first.Monitoring and rollback criteria.
Blue-green deploymentSwitch between old and new environments.Compatibility and cutover control.
A/B testingCompare model variants.Statistical validity and user impact.
Human-in-the-loopHigh-risk or ambiguous decisions.Workflow design and escalation.

Monitoring after deployment

MonitorWhy it matters
Input data qualityDetect missing, invalid, or shifted inputs.
Prediction distributionIdentify unexpected output patterns.
Latency and errorsMaintain service reliability.
Resource utilizationControl cost and performance.
Business outcomesConfirm model value.
Ground truth performanceMeasure accuracy when labels arrive.
DriftDecide whether retraining is needed.
Safety eventsDetect harmful outputs or policy violations.
User feedbackCapture quality issues not visible in metrics.

Drift distinctions

TypeMeaningExample
Data driftInput distribution changes.User behavior shifts after a new product launch.
Concept driftRelationship between inputs and target changes.Fraud patterns change after attackers adapt.
Prediction driftOutput distribution changes.Model suddenly predicts one class more often.
Performance driftActual measured accuracy or usefulness declines.Validation-like performance no longer matches production.

Exam decision rule: If inputs changed, think data drift. If the meaning of inputs changed relative to outcomes, think concept drift. If outputs changed, think prediction drift. If measured quality dropped, think performance drift.

Compact Code and Workflow Snippets

Basic ML Evaluation Pattern

## Conceptual pattern: split, train, validate, test
X_train, X_test, y_train, y_test = split_data(X, y, stratify=y)

model.fit(X_train, y_train)
predictions = model.predict(X_test)

print(classification_report(y_test, predictions))

Exam points:

  • Use stratified splitting for imbalanced classification when appropriate.
  • Do not train on the test set.
  • For time-series data, split by time rather than random order.

RAG Application Pattern

question = "What is the recommended remediation for this alert?"

query_vector = embed(question)
chunks = vector_index.search(query_vector, top_k=5, filters={"source": "approved"})
prompt = build_prompt(question=question, context=chunks, rule="Answer only from context.")

answer = llm.generate(prompt, temperature=0)
log_interaction(question, chunks, answer)
  • Retrieval quality is as important as generation quality.
  • Use metadata filters for source, tenant, sensitivity, and freshness.
  • Low temperature improves consistency but does not guarantee correctness.

Agent Tool-Use Pattern

if user_is_authorized and action in approved_actions:
    plan = agent.create_plan(request)
    if plan.requires_change:
        require_human_approval(plan)
    result = agent.call_tool(plan.tool, scoped_token)
    audit_log(plan, result)
else:
    deny_request()
  • Tool access requires authorization separate from chat access.
  • High-impact actions should use approval gates.
  • Audit the plan, tool call, result, and user identity.

Troubleshooting AI Systems

SymptomLikely areaWhat to check
High inference latencyInfrastructure/model/APIModel size, accelerator use, network path, batching, token count
Poor answer qualityData/model/promptPrompt clarity, source quality, evaluation set, retrieval quality
RAG answers cite irrelevant contentRetrievalChunking, embeddings, metadata filters, reranking
RAG says “not found” for known contentIndexingDocument ingestion, freshness, permissions, top-k, chunk size
Sudden model performance dropDrift or data pipelineInput distribution, schema changes, new user behavior
Many false positivesThreshold/metric mismatchPrecision, threshold, class balance, business cost
Many false negativesRecall issueThreshold, training labels, minority-class representation
Biased or unfair outputsData/model governanceDataset representation, label bias, evaluation by subgroup
GPU underutilizationPipeline bottleneckData loading, batch size, CPU preprocessing, network/storage
Excessive costUsage/model designToken count, model size, caching, batching, placement
Unsafe or policy-violating outputGuardrails/securitySystem prompt, content filters, jailbreak tests, logging
Agent performs wrong actionTool governancePermissions, tool schema, approval flow, validation

Common Exam Traps

TrapCorrect exam thinking
“Use AI for everything”Choose rules or automation when deterministic logic is enough
“Accuracy is the best metric”Match metric to risk, especially with imbalanced classes
“More data always improves the model”Quality, relevance, labeling, and leakage matter
“Fine-tuning adds current knowledge”RAG is usually better for changing enterprise facts
“RAG eliminates hallucinations”RAG reduces risk but still needs grounding and evaluation
“Cloud means no security responsibility”Identity, data protection, monitoring, and governance still apply
“Training and inference are the same”Training learns parameters; inference uses the model
“LLMs are deterministic search engines”LLMs generate probabilistic outputs
“Unsupervised learning uses labeled examples”Unsupervised learning finds patterns without labels
“Correlation proves root cause”AIOps findings need validation and context
“Agents are just prompts”Agents can take actions and require tool security
“Encryption fixes AI safety”Encryption protects data in transit/at rest; it does not validate output
“Test set can be reused for tuning”Use validation for tuning and test for final unbiased evaluation
“Edge is always better for privacy”Edge helps data locality but still needs lifecycle, access, and logging controls

Cisco Scenario Checklist

Use this checklist when a question describes an AI solution in a Cisco environment:

  1. Identify the outcome

    • Prediction, classification, anomaly detection, summarization, Q&A, automation, or generation.
  2. Classify the data

    • Structured, telemetry, logs, documents, audio, video, sensitive, regulated, or proprietary.
  3. Choose the AI pattern

    • Rules, supervised ML, unsupervised ML, deep learning, LLM, RAG, or agentic workflow.
  4. Place the workload

    • Edge for low latency/locality.
    • Data center for controlled high-performance hosting.
    • Cloud for managed services and elasticity.
    • Hybrid when data, latency, or governance requirements are mixed.
  5. Design the network

    • Account for bandwidth, latency, segmentation, API paths, telemetry, and resilience.
  6. Apply security

    • Identity, least privilege, encryption, segmentation, prompt/data protection, and audit logging.
  7. Plan operations

    • Model/prompt versioning, monitoring, incident response, rollback, and lifecycle management.
  8. Validate the answer

    • Prefer the option that aligns AI method, data, infrastructure, security, and business risk.

Final Review Priorities

Before sitting for Cisco AI Technical Practitioner (810-110 AITECH), be able to quickly explain:

  • Difference between AI, ML, deep learning, generative AI, RAG, and agents.
  • When to use supervised, unsupervised, reinforcement, and deep learning methods.
  • Why data quality, leakage, labeling, and bias affect model outcomes.
  • How to choose metrics based on false positive and false negative costs.
  • How RAG works and when it is better than fine-tuning.
  • How prompt engineering, model parameters, and guardrails affect LLM behavior.
  • How AI placement affects latency, privacy, cost, network design, and operations.
  • How Cisco-style architectures connect AI with networking, security, observability, and automation.
  • How to troubleshoot AI systems across model, data, prompt, retrieval, infrastructure, and security layers.

High-yield review map

AreaWhat to know quicklyCommon exam trap
AI vs ML vs deep learning vs GenAIAI is the broad field; ML learns patterns from data; deep learning uses neural networks; GenAI creates new content from learned patterns.Treating every AI solution as generative AI or assuming all AI requires deep learning.
Data lifecycleCollection, labeling, cleaning, splitting, feature engineering, validation, lineage, privacy, and monitoring.Ignoring data quality and jumping directly to model choice.
Model typesSupervised, unsupervised, reinforcement learning, classical ML, neural networks, LLMs, embeddings.Choosing a model type without checking labels, target output, latency, explainability, and data volume.
EvaluationClassification, regression, clustering, ranking, GenAI quality, business impact, latency, and cost.Optimizing one metric while missing the operational goal.
GenAI and LLMsPrompts, tokens, context windows, embeddings, RAG, fine-tuning, hallucination controls, guardrails.Assuming RAG, fine-tuning, and prompt engineering solve the same problem.
InfrastructureCompute, GPU/accelerator use, memory, storage, network throughput, latency, scalability, resilience.Designing for training needs when the workload is actually inference, or the reverse.
Networking for AIEast-west traffic, bandwidth, congestion, telemetry, segmentation, secure connectivity, edge/cloud placement.Forgetting that AI performance can be limited by network and storage, not only compute.
Security and governanceData protection, identity, access control, model risk, prompt injection, supply chain, auditability.Applying only traditional app security and missing AI-specific threats.
MLOps/LLMOpsVersioning, deployment, model registry, monitoring, drift detection, rollback, retraining, evaluation gates.Thinking deployment is the end of the AI lifecycle.

Core AI concepts candidates should distinguish

AI, ML, deep learning, and generative AI

ConceptPlain-language meaningTypical output
Artificial intelligenceSystems that perform tasks associated with human-like reasoning, perception, language, or decision-making.Prediction, recommendation, classification, generated content, automation.
Machine learningSystems learn patterns from data rather than being explicitly programmed for every rule.Class label, numeric prediction, ranking, cluster, anomaly score.
Deep learningML using multi-layer neural networks, often effective for images, speech, language, and large-scale pattern recognition.Image labels, transcriptions, embeddings, generated text, detections.
Generative AIModels that create new text, images, audio, code, or other content.Drafts, summaries, chat responses, synthetic media, generated code.
Foundation modelLarge pre-trained model adaptable to many downstream tasks.General language, vision, or multimodal outputs.
LLMLarge language model specialized for text and language-like token prediction.Text, code, structured responses, reasoning-like outputs.
Notes and examples

Exam decision rule: If the question asks for a prediction from labeled historical examples, think supervised ML. If it asks for grouping without labels, think unsupervised learning. If it asks for content generation, summarization, conversation, or transformation, think GenAI/LLM. If it asks for interaction with an environment and rewards, think reinforcement learning.

Evaluation metrics that show up in practice

Classification metrics

MetricPlain formulaUse when…Trap
AccuracyCorrect predictions / total predictionsClasses are balanced and all errors have similar cost.Misleading on imbalanced datasets.
PrecisionTP / (TP + FP)False positives are costly.High precision can miss many true cases.
Recall / sensitivityTP / (TP + FN)False negatives are costly.High recall may increase false positives.
F1 scoreHarmonic mean of precision and recallNeed balance between precision and recall.Hides the business meaning of each error type.
SpecificityTN / (TN + FP)Need to measure true negative rate.Not enough by itself for rare positive classes.
ROC-AUCRanking quality across thresholdsGeneral binary classifier comparison.Can look strong even when rare-event performance is weak.
PR-AUCPrecision-recall tradeoffImbalanced positive class.Harder to interpret without baseline prevalence.
Notes and examples

Regression and forecasting metrics

MetricWhat it emphasizesTrap
MAEAverage absolute error; easy to interpret.Does not penalize large errors as heavily as RMSE.
RMSELarger errors more heavily penalized.Sensitive to outliers.
R-squaredProportion of variance explained.Can look acceptable while business error is too high.
MAPEPercentage error.Breaks down or becomes unstable near zero values.

GenAI and LLM evaluation

Evaluation dimensionWhat to check
CorrectnessIs the answer factually right for the context?
GroundednessIs the answer supported by provided or retrieved sources?
RelevanceDoes it answer the user’s actual request?
SafetyDoes it avoid harmful, sensitive, or prohibited output?
RobustnessDoes it resist prompt injection, ambiguity, and adversarial inputs?
ConsistencyDoes it provide stable behavior across similar prompts?
LatencyDoes it respond quickly enough for the use case?
CostAre token, compute, and infrastructure costs sustainable?
ExplainabilityCan the system provide traceable rationale or citations where needed?

Exam trap: BLEU, ROUGE, or automated similarity metrics may help for some language tasks, but they do not fully prove that an LLM answer is correct, safe, or grounded.

Generative AI and LLM review

Prompt engineering essentials

A strong prompt often includes:

  1. Role or task — what the model should do.
  2. Context — facts, documents, constraints, or user background.
  3. Instructions — steps, rules, and boundaries.
  4. Examples — desired input/output patterns.
  5. Output format — table, JSON, bullets, summary, classification label.
  6. Safety constraints — what not to reveal or perform.
  7. Success criteria — what a good answer should satisfy.
Prompting techniqueUse caseTrap
Zero-shotDirect task with no examples.May be inconsistent for nuanced outputs.
Few-shotProvide examples of desired behavior.Bad examples can anchor bad behavior.
Chain-of-thought style guidanceEncourage structured reasoning or stepwise analysis.For production, prefer concise rationale or verifiable steps rather than exposing unnecessary internal reasoning.
Structured outputNeed parseable JSON, tables, or labels.Must validate output; models can still produce malformed structures.
System instructionsSet higher-priority behavior and boundaries.Not a complete security control by itself.
Notes and examples

Tokens, context, temperature, and output control

ConceptMeaningPractical effect
TokenUnit of text processed by the model.Drives context size, cost, and latency.
Context windowMaximum tokens the model can consider at once.Long documents may need chunking or retrieval.
TemperatureControls randomness.Lower for deterministic tasks; higher for creative variation.
Top-pControls probability mass considered for generation.Another way to tune output diversity.
Max tokensOutput length limit.Too low truncates answers; too high increases cost.
Stop sequencePattern that ends generation.Useful for structured outputs or agent boundaries.

RAG, fine-tuning, and prompt-only approaches

NeedBest starting approachWhy
Answer using current private documentsRetrieval-augmented generationKeeps knowledge external and updateable.
Improve response style or formatPrompting or fine-tuningDepends on consistency need and volume.
Teach new facts that change oftenRAGUpdating an index is easier than retraining.
Specialize behavior across many examplesFine-tuningUseful when repeated prompt examples are not enough.
Reduce hallucinations from missing contextRAG plus grounding checksThe model needs access to trusted information.
Build from proprietary domain data at scaleFine-tuning or custom trainingRequires governance, data quality, and infrastructure.

RAG pipeline essentials

StepPurposeCommon issue
Document ingestionBring source content into the system.Untrusted, stale, or duplicate content.
ChunkingSplit documents into retrievable pieces.Chunks too small lose context; chunks too large reduce precision.
EmbeddingConvert text into vectors for similarity search.Poor embedding model for domain language.
Vector searchRetrieve semantically related chunks.Retrieves similar but not authoritative content.
RerankingImprove result ordering.Adds latency but can improve relevance.
Prompt assemblyCombine user question and retrieved context.Context overflow or irrelevant context.
GenerationProduce final answer.Hallucination, overconfidence, missing citations.
EvaluationMeasure correctness and groundedness.Relying only on user satisfaction.

Decision rule: Use RAG when the model needs trusted, updateable, external knowledge. Use fine-tuning when the model needs consistent behavior, tone, format, or task adaptation that prompts cannot reliably achieve.

AI infrastructure and networking review

For a Cisco exam, connect AI concepts to technical infrastructure: where data moves, how workloads scale, how systems are secured, and how networks support high-throughput, low-latency operations.

Training vs inference

DimensionTrainingInference
GoalLearn model parameters from data.Use a trained model to produce outputs.
Compute patternHeavy, often distributed, accelerator-intensive.Latency-sensitive, may need autoscaling.
Data flowLarge datasets, checkpoints, repeated reads/writes.Requests and responses, sometimes retrieval calls.
Network concernHigh east-west traffic between nodes; synchronization.User latency, API throughput, availability.
Storage concernDataset access, checkpointing, versioning.Model loading, cache, retrieval index access.
OptimizationThroughput, utilization, parallelism.Latency, concurrency, cost per request.
Failure impactLost training time, checkpoint recovery.User-facing outage or degraded service.
Notes and examples

Infrastructure bottlenecks

SymptomLikely area to investigate
GPUs underutilized during trainingData pipeline, storage throughput, network bottleneck, small batch size.
Training fails intermittentlyNode failure, network instability, memory exhaustion, dependency mismatch.
Inference latency is highModel size, cold starts, retrieval delay, network path, overloaded service.
RAG answers are slowVector database latency, reranking, large context, too many retrieval calls.
Model loads slowlyStorage performance, image size, model artifact location.
Cost spikesOverprovisioned accelerators, excessive tokens, inefficient batching, poor autoscaling.
Production accuracy dropsData drift, concept drift, upstream data changes, label delay.

Networking concepts for AI workloads

ConceptWhy it matters
BandwidthLarge datasets, distributed training, and model artifacts can move significant traffic.
LatencyAffects user-facing inference, API chains, RAG retrieval, and distributed synchronization.
East-west trafficAI clusters often communicate heavily between compute nodes.
Congestion managementPrevents throughput collapse under high load.
SegmentationIsolates sensitive data, model services, management planes, and tenants.
TelemetryHelps detect bottlenecks, errors, drops, latency, and capacity issues.
ResilienceAI services need redundancy, failover, and graceful degradation.
Edge placementReduces latency and bandwidth use when data is generated near users or devices.
Secure connectivityProtects data in transit and controls access to models and APIs.

Cloud, on-premises, hybrid, and edge placement

PlacementStrengthsTradeoffs
Public cloudElastic capacity, managed AI services, rapid experimentation.Cost control, data residency, egress, shared responsibility complexity.
On-premises data centerControl, proximity to sensitive data, predictable governance.Capacity planning, hardware cost, operational responsibility.
HybridBalance control with cloud flexibility.Integration, identity, network, and policy consistency.
EdgeLow latency, local autonomy, reduced backhaul.Limited compute, lifecycle management, physical security.

Exam decision rule: If the requirement emphasizes real-time response near devices, consider edge inference. If it emphasizes massive training capacity and elasticity, cloud may fit. If it emphasizes data control, compliance, or existing private infrastructure, on-premises or hybrid may be favored.

Security, privacy, and responsible AI

Traditional security still applies

AI systems still need normal enterprise controls:

  • Strong identity and access management.
  • Least privilege.
  • Encryption in transit and at rest.
  • Network segmentation.
  • Secure APIs.
  • Logging and monitoring.
  • Vulnerability management.
  • Backup and recovery.
  • Supply chain control.
  • Incident response.
Notes and examples

AI-specific risks

RiskWhat it meansMitigation direction
Prompt injectionUser or retrieved content attempts to override instructions.Input isolation, instruction hierarchy, content filtering, tool-use controls.
Data leakageSensitive information appears in prompts, logs, training data, or outputs.Data classification, redaction, access control, retention limits.
Model inversionAttacker infers training data from model behavior.Privacy controls, output limits, careful training data governance.
Model theftUnauthorized copying or extraction of model behavior.API rate limits, monitoring, access controls, watermarking where appropriate.
PoisoningMalicious data affects training or retrieval.Data validation, trusted sources, lineage, anomaly detection.
HallucinationModel produces plausible but false content.RAG, citations, confidence handling, human review for high-risk tasks.
Bias and unfairnessModel performance differs across groups.Representative data, fairness testing, monitoring, governance review.
Unsafe tool useAgent or model takes harmful action through connected tools.Permission boundaries, approvals, sandboxing, audit logs.
Shadow AIUnapproved AI use with sensitive data.Policy, approved tools, monitoring, user education.

Responsible AI review points

PrinciplePractical meaning
TransparencyUsers and stakeholders understand AI involvement and limitations.
AccountabilityOwners are defined for model behavior, data, and incidents.
FairnessSystems are tested for harmful bias and unequal impact.
PrivacyPersonal and sensitive data is protected throughout the lifecycle.
SafetyOutputs and actions are controlled for harmful outcomes.
ReliabilitySystem behavior is monitored and validated over time.
ExplainabilityDecisions can be understood at the level required by the use case.

Common trap: Responsible AI is not only a documentation exercise. It affects data selection, model evaluation, deployment controls, user experience, monitoring, and incident response.

Common scenario decisions

Which metric should be prioritized?

ScenarioBetter metric focus
Detecting a dangerous condition where missing it is costlyRecall / sensitivity
Alerting analysts where too many false alarms waste timePrecision
Balanced classification with similar error costsAccuracy may be acceptable
Rare-event detectionPrecision, recall, F1, PR-AUC
Numeric forecast with large errors especially harmfulRMSE
Numeric forecast needing easy business interpretationMAE
LLM answers for internal knowledge baseGroundedness, correctness, citation quality, latency
AI assistant with connected toolsSafety, authorization, auditability, task success
Notes and examples

Which control reduces which GenAI risk?

RequirementStrong control
Keep answers tied to company documentsRAG with trusted sources and citations.
Prevent sensitive data exposureData loss prevention, redaction, access controls, logging policy.
Stop model from taking unauthorized actionsTool permission boundaries and approval workflows.
Reduce prompt injection impactTreat retrieved/user content as untrusted, constrain tools, validate outputs.
Improve consistent response formatStructured prompts, schema validation, possibly fine-tuning.
Improve factual currencyRetrieval from updated sources, not static model memory.
Investigate bad answersTrace prompts, model version, retrieved chunks, user context, logs.

Which infrastructure issue is most likely?

Clue in questionLikely answer direction
“High GPU cost but low utilization”Data/input pipeline or scheduling inefficiency.
“Model works in lab but fails with live traffic”Production data mismatch, scaling, latency, drift, or integration issue.
“Private data cannot leave environment”On-premises, private cloud, hybrid controls, or local inference.
“Need milliseconds of response near devices”Edge inference or local processing.
“Need to query changing internal documents”RAG and document indexing.
“Responses cite wrong or stale policy”Retrieval source quality, index freshness, chunking, or ranking.
“Users can make the assistant ignore instructions”Prompt injection and insufficient guardrails.
“Accuracy high but minority class missed”Class imbalance; use recall, precision, F1, PR-AUC.

Candidate mistakes to avoid

  1. Confusing training and inference. Training creates or updates the model; inference uses it.
  2. Using accuracy by default. Accuracy can be the wrong metric for imbalanced or high-risk cases.
  3. Ignoring data leakage. Leakage creates impressive but false performance.
  4. Assuming bigger models are always better. Larger models can increase cost, latency, risk, and complexity.
  5. Treating prompts as security boundaries. Prompts guide behavior but do not replace access control and validation.
  6. Choosing fine-tuning when RAG is the better answer. New or private facts usually belong in retrieval, not model weights.
  7. Forgetting monitoring. AI behavior can degrade after deployment.
  8. Overlooking network and storage bottlenecks. AI workloads are not only compute problems.
  9. Ignoring governance. Data lineage, auditability, privacy, and responsible AI are part of production readiness.
  10. Missing the business goal. The best technical metric may not match the operational requirement.

Fast final-review checklist

Before you move into practice questions, make sure you can answer these without notes:

  • Can you explain AI, ML, deep learning, GenAI, LLMs, and foundation models distinctly?
  • Can you choose supervised, unsupervised, reinforcement, RAG, or fine-tuning based on a scenario?
  • Can you identify data leakage, drift, imbalance, and poor data splitting?
  • Can you choose precision, recall, F1, MAE, RMSE, or groundedness for the right situation?
  • Can you explain why training and inference have different infrastructure needs?
  • Can you identify when latency, bandwidth, storage, or compute is the bottleneck?
  • Can you describe the role of embeddings and vector search in RAG?
  • Can you recognize hallucination, prompt injection, poisoning, and data leakage risks?
  • Can you outline a basic MLOps/LLMOps lifecycle from data to monitoring?
  • Can you connect AI workloads to secure, resilient network design?

Put the review into practice